Skip to content

add reproducible tarballs to the enhancements of EasyBuild v5 #279

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
smoors merged 3 commits into from
Sep 27, 2024
Merged

add reproducible tarballs to the enhancements of EasyBuild v5 #279

Changes from 1 commit
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
bea4425
add reproducible tarballs to the enhancements of EasyBuild v5
lexming Sep 26, 2024
a6386d4
use cloned instead of downloaded for sources get from git repos
lexming Sep 26, 2024
7d50192
avoid repition in text of reproducible tarballs enhacement
lexming Sep 26, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
15 changes: 15 additions & 0 deletions docs/easybuild-v5/enhancements.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -6,6 +6,7 @@ Various significant enhancements are included in EasyBuild v5.0, including:

* [`run_shell_cmd` function][run_shell_cmd]
* [Granular exit codes][granular_exit_codes]
* [Reproducible tarballs][reproducible_tarballs]

---

Expand All @@ -25,3 +26,17 @@ checksum check. The full list of exit codes is defined in the class
EasyBuild will always return its own exit codes on termination. Other exit
codes from external processes executed through `run_shell_cmd` or HTTP response
status codes are reported in the corresponding logs.

## Reproducible tarballs { : #reproducible_tarballs}

EasyBuild can now generate reproducible tarballs of sources downloaded from Git
repositories. This means that the contents of sources obtained by cloning Git
repositories will be consistent across different systems and across time,
allowing to reliably validate those sources with checksums. EasyBuild follows
the [archival guidelines from reproducible-builds.org](https://reproducible-builds.org/docs/archives/)
to generate reproducible tarballs.

This new feature does not apply to sources cloned with `keep_git_dir` enabled.
Including the `.git` folder in the sources is inherently time-dependent as it
contains information about the clone action itself, which hinders the creation
of a reproducible tarball.